An administrator is setting up Nutanix Enterprise AI with a custom domain (ai.

Comprehensive and Detailed Explanation From Exact Extract of Nutanix Artificial Intelligence documents knowledge without any external URL or links:

To successfully configure a custom domain with a corporate CA-signed certificate in Nutanix Enterprise AI, the administrator must ensure the following two external prerequisites are met:

DNS Configuration (Option A):AnA recordmust be created in the corporate DNS server that points the fully qualified domain name (FQDN) ai.company.com to the external IP address assigned to the NAI Ingress Gateway (LoadBalancer IP). This ensures that traffic destined for the custom URL reaches the cluster.

Certificate Provisioning (Option C):A validCA-signed TLS certificate(and its corresponding private key) matching the FQDN ai.company.com must be obtained from the corporate Certificate Authority. This certificate is then stored as a Kubernetes Secret (e.g., nai-letsencrypt-certificate or similar custom secret) and referenced by the Ingress Gateway to enable secure HTTPS termination.